Protection of privacy

Google Ads

The website operator uses Google Ads. Google Ads is an online advertising programme of Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Ads makes it possible to display advertisements in the Google search engine or on third-party websites when the user enters certain search terms on Google (keyword targeting). Furthermore, targeted advertisements can be played on the basis of the user data available at Google (e.g. location data and interests) (target group targeting). As the website operator, we can evaluate this data quantitatively by analysing, for example, which search terms have led to the display of our advertisements and how many advertisements have led to corresponding clicks.

The use of Google Ads is based on Art. 6 para. 1 lit. f DSGVO. The website operator has a legitimate interest in marketing its service products as effectively as possible.

Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://policies.google.com/privacy/frameworks and https://privacy.google.com/businesses/controllerterms/mccs/.

Google Remarketing

 This website uses the functions of Google Ads Remarketing. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Remarketing analyses your user behaviour on our website (e.g. clicking on certain products) in order to classify you in certain advertising target groups and subsequently play suitable advertising messages to you when you visit other online offers (remarketing or retargeting).

Furthermore, the advertising target groups created with Google Remarketing can be linked with Google's cross-device functions. In this way, interest-based, personalised advertising messages that have been adapted to you depending on your previous usage and surfing behaviour on one end device (e.g. mobile phone) can also be displayed on another of your end devices (e.g. tablet or PC).

If you have a Google account, you can object to personalised advertising at the following link: https://www.google.com/settings/ads/onweb/.

The use of Google Remarketing is based on Art. 6 para. 1 lit. f DSGVO. The website operator has a legitimate interest in marketing its products as effectively as possible. Insofar as a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a DSGVO and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user's terminal device (e.g. device fingerprinting) in the 11 / 15 sense of the TTDSG. Consent can be revoked at any time.

Further information and the data protection provisions can be found in Google's data protection declaration at: https://policies.google.com/technologies/ads?hl=de.

Google Conversion-Tracking

 This website uses Google Conversion Tracking. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

With the help of Google conversion tracking, Google and we can recognise whether the user has carried out certain actions. For example, we can evaluate which buttons on our website were clicked how often and which products were viewed or purchased particularly frequently. This information is used to create conversion statistics. We learn the total number of users who clicked on our ads and what actions they took. We do not receive any information with which we can personally identify the user. Google itself uses cookies or comparable recognition technologies for identification.

The use of Google conversion tracking is based on Art. 6 (1) lit. f DSGVO. The website operator has a legitimate interest in analysing user behaviour in order to optimise both its website and its advertising. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a DSGVO and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user's terminal device (e.g. device fingerprinting) as defined by the TTDSG. The consent can be revoked at any time.

More information on Google conversion tracking can be found in Google's privacy policy: https://policies.google.com/privacy?hl=de.

2.1.3 Social media

Our website contains links to services such as Facebook, Xing, LinkedIn, Twitter and YouTube. When clicking the link you will be transferred to the page of the specific provider, i.e. only then user information will be transferred to the respective provider. For information on how your data is treated when using the web pages of other providers, please refer to the privacy policy of the respective provider.

2.1.4  INNEO^® social media sites

Data processing through social networks

INNEO^® maintains publicly accessible profiles on social networks. The individual social networks used by INNEO^® can be found below.

Social networks such as Facebook, Google+ etc. can generally comprehensively analyse your user behaviour when you visit their website or a website with integrated social media content (e.g. Like buttons or advertising banners). By visiting the INNEO^® social media presences, numerous data protection-relevant processing operations are triggered.

In detail:

If you are logged into your social media account and visit an INNEO^® social media presence, the operator of the social media portal can assign this visit to your user account. However, your personal data may also be collected under certain circumstances if you are not logged in or do not have an account with the respective social media portal. In this case, this data collection takes place, for example, via cookies that are stored on your end device or by recording your IP address.

With the help of the data collected in this way, the operators of the social media portals can create user profiles in which your preferences and interests are stored. In this way, you can be shown interest-based advertising inside and outside the respective social media presence. Provided you have an account with the respective social network, the interest-based advertising may be displayed on all devices on which you are or were logged in.

Please also note that INNEO^® cannot track all processing on the social media portals. Depending on the provider, further processing operations may therefore be carried out by the operators of the social media portals. For details, please refer to the terms of use and data protection provisions of the respective social media portals.

Legal basis:

The INNEO^® social media presences are intended to ensure the most comprehensive presence possible on the Internet. This is a legitimate interest within the meaning of Art. 6 (1) lit. f DSGVO. The analysis processes initiated by the social networks may be based on deviating legal grounds to be indicated by the operators of the social networks (e.g. consent within the meaning of Art. 6 para. 1 lit. a DSGVO).

Person responsible and assertion of rights

If you visit one of the INNEO^® social media sites (e.g. Facebook), we are jointly responsible with the operator of the social media platform for the data processing operations triggered during this visit. In principle, you can assert your rights (information, correction, deletion, restriction of processing, data portability and complaint) both vis-à-vis us and vis-à-vis the operator of the respective social media portal (e.g. vis-à-vis Facebook).

Please note that despite the joint responsibility with the social media portal operators, we do not have full influence on the data processing procedures of the social media portals. Our options are largely determined by the corporate policy of the respective provider.

Storage period

The data collected directly by INNEO^® via the social media presence is deleted from our systems as soon as the purpose for storing it no longer applies, you request us to delete it, revoke your consent to store it or the purpose for storing the data no longer applies. Stored cookies remain on your end device until you delete them. Mandatory legal provisions - in particular retention periods - remain unaffected.

INNEO^® has no influence on the storage period of your data, which is stored by the operators of social networks for their own purposes. For details, please contact the operators of the social networks directly (e.g. in their privacy policy, see below).

Social networks in detail

Facebook

We have a profile on Facebook. The provider is Facebook Inc, 1 Hacker Way, Menlo Park, California 94025, USA.
You can independently adjust your advertising settings in your user account. To do so, click on the following link and log in:
https://www.facebook.com/settings?tab=ads

For details, please refer to Facebook's privacy policy:
https://www.facebook.com/about/privacy

Instagram

We have a profile on Instagram. The provider is Instagram Inc, 1601 Willow Road, Menlo Park, CA 94025, USA.

For details, please see Instagram's privacy policy: https://instagram.com/about/legal/privacy.

Twitter

We use the short message service Twitter. The provider is Twitter Inc, 1355 Market Street, Suite 900, San Francisco, CA 94103, USA.
You can independently adjust your Twitter privacy settings in your user account. To do so, click on the following link and log in: https://twitter.com/personalization

For details, please refer to Twitter's privacy policy: https://twitter.com/de/privacy

XING

We have a profile on XING. The provider is XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany.

For details on how they handle your personal data, please refer to XING's privacy policy: https://privacy.xing.com/de/datenschutzerklaerung

LinkedIn

We have a profile on LinkedIn. The provider is LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland.

For details on how they handle your personal data, please refer to LinkedIn's privacy policy: https://www.linkedin.com/legal/privacy-policy

2.1.5 Plugins and Tools

YouTube with extended data protection

This website embeds videos from YouTube. The operator of the pages is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

We use YouTube in extended data protection mode. According to YouTube, this mode means that YouTube does not store any information about visitors to this website before they watch the video. However, the transfer of data to YouTube partners is not necessarily excluded by the extended data protection mode. Thus, regardless of whether you watch a video, YouTube establishes a connection to the Google DoubleClick network.

As soon as you start a YouTube video on this website, a connection to the YouTube servers is established. This tells the YouTube server which of our pages you have visited. If you are logged into your YouTube account, you enable YouTube to assign your surfing behaviour directly to your personal profile. You can prevent this by logging out of your YouTube account.

Furthermore, after starting a video, YouTube may store various cookies on your end device or use comparable recognition technologies (e.g. device fingerprinting). In this way, YouTube can obtain information about visitors to this website. This information is used, among other things, to collect video statistics, improve the user experience and prevent fraud attempts.

If necessary, further data processing processes may be triggered after the start of a YouTube video, over which we have no control.

YouTube is used in the interest of an appealing presentation of our online offers. This represents a legitimate interest within the meaning of Art. 6 Para. 1 lit. f DSGVO. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a DSGVO and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user's terminal device (e.g. device fingerprinting) within the meaning of the TTDSG. Consent can be revoked at any time.

For more information about data protection at YouTube, please see their privacy policy at: https://policies.google.com/privacy?hl=de.

Vimeo

This website uses plugins from the video portal Vimeo. The provider is Vimeo Inc, 555 West 18th Street, New York, New York 10011, USA.

When you visit one of our pages equipped with a Vimeo video, a connection to the Vimeo servers is established. This tells the Vimeo server which of our pages you have visited. In addition, Vimeo obtains your IP address. This also applies if you are not logged in to Vimeo or do not have an account with Vimeo. The information collected by Vimeo is transmitted to the Vimeo server in the USA.

If you are logged into your Vimeo account, you enable Vimeo to assign your surfing behaviour directly to your personal profile. You can prevent this by logging out of your Vimeo account.

Some videos contain embedded forms or buttons. These are used to contact you or to enable you to navigate more easily. The data you enter is stored for us on the servers of Vimeo, whose privacy policy you can view here: https://vimeo.com/privacy.

The data you enter will remain with us until you request us to delete it, revoke your consent to store it or the purpose for storing the data no longer applies. Mandatory legal provisions - in particular retention periods - remain unaffected.

Vimeo uses cookies or comparable recognition technologies (e.g. device fingerprinting) to recognise website visitors.

The use of Vimeo is in the interest of an appealing presentation of our online offers. This represents a legitimate interest within the meaning of Art. 6 Para. 1 lit. f DSGVO. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a DSGVO and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user's terminal device (e.g. device fingerprinting) within the meaning of the TTDSG. The consent can be revoked at any time.

Data transfer to the USA is based on the standard contractual clauses of the EU Commission and, according to Vimeo, on "legitimate business interests". Details can be found here: https://vimeo.com/privacy.

Further information on the handling of user data can be found in Vimeo's privacy policy at: https://vimeo.com/privacy.

2.2 Active use of the website

2.2.1 User enquiries

In order for us to be able to process and respond to your enquiries, e.g. via contact form, to our e-mail address or by telephone, we process the personal data you have provided in this context.
With enquiries via contact form, you need to provide your salutation, last name and e-mail address. You may provide your first name, company and telephone number voluntarily.
With enquiries to our e-mail address, we always process your e-mail address in order to reply to you as well as the other information you submit to us in your message.
With enquiries by telephone, we process the personal data you have provided.

The legal basis for the processing of personal data related to user enquiries is Art. 6 Par. 1 f GDPR. Our legitimate interest is the appropriate respond to user enquiries.

2.2.2 Registration on the website

You can register on our website as a client or an interested person to make use of services. You have to provide your first and last name, company, e-mail address, address, telephone number and a password of your choice. The provision of a fax number is optional. Registered users can amend the data provided during registration at any time as required. The mandatory information requested during registration must be complete. Otherwise, we will reject the registration.
We will use the e-mail address provided with the registration to inform you about important changes such as scope of services or modifications for technical reasons.

We process your data for the purposes above for the performance of a contract or to take steps prior to entering into a contract in accordance with Art. 6 Par. 1 b GDPR when you register for the support services provided there.
The data collected during registration is stored by us until you request erasure or the purpose of storage has ceased. Statutory retention periods remain unaffected.

2.2.3 Registration for events and training/webinars

You can log in on our website to participate in events/training/webinars. For events, you have to provide your salutation and last name, e-mail address, telephone number and zip code. The provision of your first name, company, job title and other address details is optional. To register for training/webinars you have to provide the salutation, first and last name, company and address for all participants. For confirmations and queries, you have to provide the first and last name, job title as well as an e-mail address and telephone number. The provision of a fax number is optional. The mandatory information requested during registration must be complete. Otherwise, we will reject the registration. If you register not only yourself but also other persons for events or training/webinars, you must ensure that the appropriate consent to provide their personal data as part of the registration has been obtained from the other persons.

We use the data you have provided for booking and holding the events and training/webinars. In the case of training, we also use the data for the purposes of issuing a certificate of participation in the training for you and sending you a participant’s evaluation form to rate the training.

We process your data for the purposes above for the performance of a contract or to take steps prior to entering into a contract in accordance with Art. 6 Par. 1 b GDPR when you register for an event or training/webinar.
The data collected during registration is stored by us until you request erasure or the purpose of storage has ceased. Statutory retention periods remain unaffected.

2.2.4 Requests for quotes and orders via the website

You can send enquires to submit quotes and place orders via the request and contact forms on our website or by telephone. With enquires and orders related to this via a request or contact form, you have to provide your salutation, last name and e-mail address. You may provide your first name and telephone number or additional data voluntarily. With enquiries by telephone, we process the data you have provided. Where necessary for submitting quotes and for contracts related to your order, we will ask you to provide additional data such as payment details (e.g. credit card number).
We process the data you have provided to generate quotes, to accept and process orders and for the delivery or supply (e.g. via download) of the ordered products to you.

We process the data you have provided in accordance with Art. 6 Par. 1 b GDPR for the performance of contracts or to take steps prior to entering into a contract, in particular for generating quotes, for completing and processing your order, for the provision of customer services and to manage the customer relationship. Failure to provide necessary data may result in not being able to entering into a contract.

2.2.5 Registration and customer account

You can create a customer account for using our online shop. You need to register for this. To do so, you have to provide your e-mail address and a password of your choice. Once successfully registered, you can make purchases via your customer account. Registered users can amend the data provided during registration at any time as required.
We use the so-called double opt-in procedure for registration, i.e. your registration will only be completed after you have confirmed your registration by clicking the link included in the confirmation e-mail that is sent to you for this purpose.

We process your data for the purposes above on the basis of the following legal bases:

• for the performance of a contract or to take steps prior to entering into a contract in accordance with Art. 6 Par. 1 b GDPR, insofar as you use the user account for purchases in our online shop; and
• the purposes of our legitimate interests in accordance with Art. 6 Par. 1 f GDPR. Our legitimate interest is to provide you with a user-friendly and tailored experience of our website.

2.2.6 Online shop and order process

In our online shop, we allow you to place an order from our portfolio. In the online shop, you can add items from our portfolio to the shopping basket. All items and the quantity of items are stored in the shopping basket. To make ordering easier for you, we also store a not fully completed order so you can complete it at your next visit.
When ordering goods in our online shop, we collect personal data from you in order to accept and process the order and to deliver the ordered products as part of the online sales. You can place an order in our online shop as a registered user of a customer account. In this case, we process your e-mail address, password and where needed other data provided as part of the customer account. With all orders we process your first and last name, company name, address, telephone number and e-mail address as well as eventual payment details (e.g. credit card number) provided by you.

We process the data you have provided in accordance with Art. 6 Par. 1 b GDPR for the performance of contracts or to take steps prior to entering into a contract, in particular for generating quotes, for completing and processing your order and to manage the customer relationship. Failure to provide necessary data may result in not being able to entering into a contract.

2.2.7 Download of trial versions

You can download trial versions of individual products from our website.
You have to provide your salutation and last name, e-mail address, telephone number and zip code in the specific form for this. The provision of your first name, company, job title and other address details is optional. We are using the data provided only for the purpose of transferring and utilising the particular trial version. The mandatory information requested during registration must be complete.
For follow-up questions or in the case of changes for technical reasons, we will use the e-mail address provided with the registration to keep you informed.

We process the data provided by you in accordance with Art. 6 Par. 1 b GDPR to take steps prior to entering into a contract or for the performance of contracts related to the specific software.

We store the data collected during registration until you request erasure, withdraw your consent to storage or until the purpose of storage has ceased. Statutory retention periods remain unaffected.

2.2.8 Promotional usage

Newsletter

With your consent, we use the data for the delivery of our newsletter. When you register for the newsletter on our website, we collect your e-mail address as mandatory information. Your salutation and name are collected on a voluntary basis. We use the so-called double opt-in procedure for newsletter registration, i.e. your registration will only be completed after you have confirmed your registration by clicking the link included in the confirmation e-mail that is sent to you for this purpose.
You may withdraw a consent given to us at any time with future effect. However, the lawfulness of data processing before withdrawal remains unaffected. Thus you can unsubscribe from the newsletter at any time by notification to the contact details given in Clause 1 or via the unsubscribe link provided in the newsletter.

The legal basis for the processing of your data for the delivery of the newsletter is, when you have given us your consent, Art. 6 Par. 1 a GDPR.
We store the data you have deposited with us for the purpose of receiving the newsletter until you unsubscribe from the newsletter and will delete them after unsubscribing from the newsletter. Data stored by us for other purposes remain unaffected.

Usage of data for e-mail marketing and right to object

Our interest is to foster our customer relationships. When we obtain your e-mail address as part of entering into a contract and the provision of our products and services and you have not objected to this, we reserve the right to send you further interesting offers for similar products from our portfolio and customer satisfaction ratings periodically by e-mail. You can object to this usage of your e-mail address at any time by notification to the contact options given in Clause I or via an unsubscribe link provided in the advertising mail, without additional costs other than the transmission costs according to base rates.

Insofar as you have provided your e-mail address as part of the purchase of goods or services and we send tailored advertising to you, we process your data for the delivery of e-mail advertising for the purposes of our legitimate interests in accordance with Art. 6 Par. 1 b GDPR in conjunction with § 7 Par. 3 UWG (German Act Against Unfair Competition). Our legitimate interest is based on our commercial interest in the execution of promotional activities and targeted advertising.

2.2.9 Data security with applications and in the application procedure

Our website offers you the opportunity to send us your application directly via an online application form. Application documents may contain special categories of personal data.

Processing of personal data

As a rule, applicant data include: First and last name, if applicable your academic degree, date and place of birth, contact details (address, e-mail, telephone and/or mobile number), application documents (letter of motivation, curriculum vitae, certificates), language and other skills. Furthermore, we process the data submitted by you when contacting us via the application form.
We will take the personal data provided by you as a basis for our decisions in the application procedure in compliance with statutory regulations. For example, we will use your professional qualifications for our decision to consider you in the closer selection procedure or a personal impression in a job interviews to decide whether we offer you the job you have applied for.

We process the personal data for our decision on establishing an employment relationship on the basis of Art. 88 Par. 1 GDPR in conjunction with § 26 Sect. 1 S. 1 BDSG (German Federal Data Protection Act).

Processing of special personal data

Special categories of personal data in accordance with Art. 9 GDPR are personal data revealing racial or ethnic origin, political opinions, religious (e.g. religious affiliation/confession) or philosophical beliefs, or trade union membership, or biometric data for the purpose of unique identification (e.g. photographs), data concerning health (e.g. information on the degree of severe disability) or data concerning sex life or sexual orientation. If your curriculum vitae contains special categories of personal data, we do not intentionally collect these data. We expressly request not to send us such data.
In the case you submit, voluntarily and against our express request, special categories of personal data in accordance with Art. 9 Par. 1 GDPR (e.g. your photograph or information on your religious affiliation/confession) as part of your application documents, we store these data on the basis of your consent in accordance with Art. 88 Par. 1 GDPR in conjunction with § 26 Sect. 3 S. 2 BDSG (German Federal Data Protection Act). This also applies for other personal data you communicate to us at a later stage in the application procedure. By voluntarily submitting these data, you consent to the storage of these special personal data as part of the application procedure.
Basically, we do not take these special personal data into consideration for selection decisions, unless statutory obligations demand to take these special personal data into account. For example, some job offers allow preferential treatment for persons with disabilities in accordance with applicable law. In these cases, the information is always voluntary and provided with your express consent given by voluntarily submitting these data.

We process your special personal data on the basis of Art. 9 Par. 1 GDPR based on your consent in accordance with Art. 88 Par. 1 GDPR in conjunction with § 26 Sect. 3 S. 2 BDSG (German Federal Data Protection Act).
If we send you a refusal, your data will be deleted 3 months after the rejection has been communicated at the latest. In the case of acceptance, we will incorporate your data into the personnel administration process for the purpose of establishing an employment relationship in compliance with statutory regulations. If you have given your consent, we will also store your application for future vacancies. For follow-up questions, we will use the e-mail address or telephone number provided to contact you.

2.2.10 Compliance with statutory regulations

We also process your personal data for the fulfilment of other statutory obligations related to the processing of enquiries and orders. These include, in particular, retention periods in accordance with commercial or financial law.
In these cases, we process your personal data for the compliance with a legal obligation to which we are subject in accordance with Art. 6 Par. 1 c GDPR, in conjunction with commercial, trade or financial law, insofar as we are obliged to record and store your data.

2.2.11 Law enforcement

We also process your personal data in order to be able to assert our rights and to exercise our legal claims. Furthermore, we process your personal data in order to be able to defend against legal claims. Finally, we process your personal data insofar as necessary for the defence or prosecution of criminal offences.
We process your personal data for this purpose based on our legitimate interests in accordance with Art. 6 Par. 1 f GDPR, insofar as we assert or defend against legal claims, or when prohibiting or detecting criminal offences.

3. Payments and credit assessment

Encrypted payments

If you enter into a contract, which requires you to send us your payment information, we will require this data to process your payment.
Payments using common means of payment are only made via encrypted SSL or TLS connections. You can identify an encrypted connection by the fact that “http://” changes to “https://” in the address bar of your browser and the lock icon in your browser line.
In the case of encrypted communication, the payment details you submit to us cannot be read by third parties.

Payment processing

We offer payment via PayPal, credit card, invoice and prepayment.

PayPal

In the case of payment via PayPal, the provider of this payment service is PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (in the following “PayPal”).
If you select payment via PayPal, the payment data you have entered is transmitted to PayPal.
The transmission of your data to PayPal is carried out on the basis of Art. 6 Par. 1 a GDPR (consent) and Art. 6 Par. 1 b GDPR (processing for the performance of a contract). You may withdraw your consent to data processing at any time. A withdrawal does not affect the effectiveness of data processing operations in the past.

Credit card (MasterCard, Visa, Maestro)

In the case of payment via credit card (MasterCard, Visa, Maestro) using the interface of TeleCash, the provider of this payment service is First Cash Solution GmbH, Okenstr. 7, 77652 Offenburg (in the following “First Cash Solution”).
If you select payment via credit card, the payment data you have entered is transmitted to First Cash Solution.
The transmission of your data to First Cash Solution is carried out on the basis of Art. 6 Par. 1 a GDPR (consent) and Art. 6 Par. 1 b GDPR (processing for the performance of a contract). You may withdraw your consent to data processing at any time. A withdrawal does not affect the effectiveness of data processing operations in the past.

Credit assessment

If we make advance payments, we reserve the right, for the purpose of our legitimate interests, to obtain a credit report based on mathematical and statistical procedures from the following companies, where appropriate:

Creditreform AG
Hellersbergstrasse 12, 41460 Neuss

Bisnode Deutschland GmbH
Robert-Bosch-Strasse 11, 64293 Darmstadt

We transmit the data necessary for credit assessment to the companies mentioned above and use the information we receive on the statistical probability of payment default. Where we hold personal data about you as a customer, these data may be included with the data transmitted to the assessment agencies. The credit report can include probability values (score values), which are calculated on the basis of scientifically proven mathematical and statistical procedures. With personal data, conclusions are thereby drawn using a variety of characteristics such as income, address data, occupation, marital status and previous payment history, on the customer’s future risk of payment default. The result is expressed in the form of a payment value (so-called score). The information obtained as part of the credit report forms the basis of our decision on the establishment, execution or termination of the contractual relationship. However, the choice of one of the offered payment methods does not depend on such information.
We process your personal data for credit assessment on the basis of the following legal bases:

• for the performance of a contract or to take steps prior to entering into a contract in accordance with Art. 6 Par. 1 b GDPR;
• for the purpose of our legitimate interests in accordance with Art. 6 Par. 1 f GDPR, insofar as we assert or defend against legal claims, or when prohibiting or detecting criminal offences.

4. Categories of recipients

First, our employees get knowledge of your personal data. For some of our business processes, in particular IT services, for processing of contracts, management of customer relationship and services to customer and interested persons, we also use selected and contracted service providers. Some of our service providers obtain your personal data as processors strictly bound to our directives when handling your personal data. In some cases the recipients operate independently with the data we transmit to them.

In the following we list further categories of recipients of your personal data: payment service providers, logistics service providers, software manufacturers for licensing of their software, credit agencies, collection service providers, advertising and market research providers, service providers for the dispatch of newsletters and e-mail advertising.

5. Transfer to third countries

We do not transfer your personal data to countries outside the EU or the EEA or to international organisations.

6. Retention period

Where no separate information on erasure is stated in this privacy policy, we delete your personal data if no longer required for the business relationship, in particular for the performance of a contract or to take steps prior to entering into a contract and statutory retention periods or legal bases have ceased. The retention periods specified in the HGB (German Commercial Code) and in the AO (German Fiscal Code) are between two and ten years. Furthermore, limitation periods affect the retention period. Limitation periods usually are between 12 and 36 months but can be up to 30 years.

7. Your rights as a data subject

Rights to communication, rectification, erasure, restriction of processing, data portability

In accordance with Art. 15 GDPR you have the right to obtain communication, at any time, on whether and which personal data concerning you are stored at us and to whom these data may be transmitted. Furthermore, in accordance with statutory regulations, you have the rights to rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR) and data portability (Art. 20 GDPR).

Right to object

Furthermore, in accordance with Art. 21 Par. 1 GDPR, you can object to processing of personal data, carried out by us on the basis of Art. 6 Par. 1 f GDPR (on the basis of a balance of interests), at any time for reasons of your particular situation. In particular, you can object to using your data for the purpose of direct marketing at any time with future effect

Right to withdrawal

You can withdraw a consent to us at any time and without reason. However, the lawfulness of data processing before withdrawal remains unaffected.

Assertion of rights

You can assert the rights mentioned above in writing against our company to the contact details listed in Sect. 1.
Please note that we reserve the right to request evidence of your identity as the real data subject asserting the rights stated here, where we are in doubt you are asserting these rights as the real data subject.

Right to lodge a complaint with the data protection supervisory authority

You have the right, in accordance with Art. 77 GDPR, to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or of the alleged infringement, if you consider the processing of personal data concerning you violates the principles of the GDPR. The right to lodge a complaint remains without prejudice to any other administrative or legal remedy.

For the purposes of the UK, the supervisory authority is the Information Commissioner’s Office (ICO), the contact details of which are available https://ico.org.uk/global/contact-us/

8. Scope of duties to provide data

Basically, you are not obliged to provide your personal data. However, if you do not, we will not be able to offer you our website, answer your enquiries and enter into a contract with you. Mandatory personal data are all marked “*” or “!”, all other personal data are optional.

9. Automated decision making / profiling

We do not use automated decision making or profiling (an automated analysis of your personal circumstances).

10. Links

Some areas of our website contain links to websites of third party providers. These websites are subject to their own data protection principles. We are not responsible for their operation, including handling of data. When submitting information to or via such third party provider websites, you should check the privacy policies of these sites prior to submitting information that can be assigned to yourself.

Information on your right to object Art. 21 GDPR

1. You have the right to object to the processing of your data carried out on the basis of Art. 6 Par. 1 f GDPR (data processing based on a balancing of interests) or Art. 6 Par. 1 e GDPR (data processing in public interest), at any time for reasons of your particular situation. This also applies for a profiling based on this directive in accordance with Art. 4 No. 4 GDPR.
When you object, we will no longer process your personal data unless we demonstrate compelling legitimate reasons for the processing overweighing your interests, rights and freedoms or the processing is necessary for the assertion, execution or defence of legal claims.

2. In individual cases we also process your personal data for direct marketing purposes. If you do not wish to receive advertising, you have the right to object to this at any time; this also includes profiling to the extent that it is related to such direct marketing. We will respect this objection with future effect.
Your data will no longer be processed for the purpose of direct marketing when you object to processing for this purpose.

The objection can be formless and should be addressed to the contact details of our company stated in Sect. 1.

Amendment of the privacy policy

We reserve the right to modify this privacy policy to adapt it to changing statutory regulations or to implement modified services in this privacy policy, e.g. when introducing new services. The new privacy policy will then be effective for your next visit. If not specified otherwise, such modifications take immediate effect. Therefore, please check this privacy policy on a regular basis to view the latest version.

Revision: August 2023